On Mon, May 4, 2009 at 9:07 AM, Matt Olney <molney@sourcefire.com> wrote:
> Yes, the published rules are not 2.8.4 specific.>> Somewhere in the archives for this list would be about 50 emails about> it, but the short short is that in order to use the latest detection> set, you need to be at 2.8.4.>> Matt>> On Mon, May 4, 2009 at 8:36 AM, James Lay <jlay@slave-tothe-box.net> wrote:>> And another one ;)>>>> May 4 06:12:29 bpagateway snort[32645]: FATAL ERROR: Warning:>> /chroot/snort/etc/snort/rules/web-misc.rules(534) => Unknown keyword>>>> Are rules now 2.8.4 specific? Still on 2.8.3.>>>> J~>>>>>>>> ------------------------------------------------------------------------------>> Register Now & Save for Velocity, the Web Performance & Operations>> Conference from O'Reilly Media. Velocity features a full day of>> expert-led, hands-on workshops and two days of sessions from industry>> leaders in dedicated Performance & Operations tracks. Use code vel09scf>> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf>> _______________________________________________>> Snort-users mailing list>> Snort-users@lists.sourceforge.net>> Go to this URL to change user options or unsubscribe:>> https://lists.sourceforge.net/lists/listinfo/snort-users>> Snort-users list archive:>> http://www.geocrawler.com/redir-sf.php3?list=snort-users>>>